Submit a ticketCall us

Systems Monitoring for Dummies
Our new eBook will teach you the fundamentals and help you create monitors and alerts that are effective, meaningful, and actionable. Monitoring is more than a checkbox on your to-do list. This free eBook will give you practical advice to help you succeed in all aspects of monitoring – discovery, alerting, remediation, and troubleshooting. Don’t miss out on this indispensable resource for newbies, experienced IT pros, and everyone in between. Register Now.

Home > Success Center > Log & Event Manager (LEM) > Manage the LEM Database and required storage space

Manage the LEM Database and required storage space

Created by Tim Rush, last modified by Steve.Hawkins on Aug 30, 2016

Views: 996 Votes: 3 Revisions: 23

Overview

The LEM database is self-managed by the application. Once the database has consumed up to 90% of available storage space, the oldest events are overwritten.

Environment

LEM version 5.6 and later

Detail

LEM is a network appliance, virtualized for ease of management, and requires a minimum of 250GB of storage space. When log retention time needs to be increased, LEM size can be increased to 2.0 TB in versions 5.6.x through 6.3.x.

Database size

The database is contained within the LEM virtual machine, with no option for an external database. By default the database size will consume 90% of the available storage space (after operating system and application requirements).

Retention period

Where auditing requirements require a specific retention period for logs, LEM chooses to use 'size'. To calculate the retention period, launch the Database Maintenance Report (DBM) or create a scheduled weekly or monthly report for this. The report will display "Database Time Span (days)" for the retention period, but storage space consumed must also be checked.

If the DBM shows a Time Span of 90 days and the database has consumed 45% of the available storage space, the retention period is 180 days (6 months).

If the DBM shows a Time Span of 90 days and the database has consumed all 90% of the available storage space, the retention period is 90 days.

If auditing requires a retention period of 180 days (6 months), the DBM shows a Time Span of 90 days, and the database consumes all 90% of the available storage, the LEM size needs to be doubled. See Resize a LEM virtual appliance for more information.  

 

Last modified

Tags

Classifications

Public